Re: Telnet - can't telnet is as root

2004-07-05 Thread Roop Nanuwa
On Mon, 5 Jul 2004 17:49:32 +1000 , [EMAIL PROTECTED]
<[EMAIL PROTECTED]> wrote:
> I would like to telnet into my 4.9 RELEASE box using root.  Currently when I
> try to telnet in as root I get the reply
> "LOGIN root REGUSED (NOROOT)".  Does anyone know how I can configure my
> system to allow root to directly telnet in.  I know that I can telnet in as
> a standard users then 'su' to switch to root.  Is there any reason why I
> should configure my system so that I can telnet in directly as root?
> Thanks.

It's not recommended. At all. It's highly insecure. If you're still
determined to do it, though: You will need to add the keyword 'secure'
to the end of the lines in /etc/ttys that look like ttypN (where N is a number).

Again, you really should be using SSH instead of telnet if you value your
system at all.

--roop
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: Telnet - can't telnet is as root

2004-07-05 Thread Dick Davies
* peter lageotakes <[EMAIL PROTECTED]> [0751 08:51]:

> --- [EMAIL PROTECTED] wrote:
> >  any reason why I
> > should configure my system so that I can telnet in
> > directly as root?

> I believe that this would be a security precaution. 
> If someone tries to compromise your system, then it
> means that they have to get two passwords to get root.

But if you're telnetting, you're sending both in the clear
anyway  

-- 
Fortune's Fictitious Country Song Title of the Week:
"How Can I Miss You if You Won't Go Away?"
Rasputin :: Jack of All Trades - Master of Nuns
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: Telnet - can't telnet is as root

2004-07-05 Thread peter lageotakes
--- [EMAIL PROTECTED] wrote:
> I would like to telnet into my 4.9 RELEASE box using
> root.  Currently when I
> try to telnet in as root I get the reply
> "LOGIN root REGUSED (NOROOT)".  Does anyone know how
> I can configure my
> system to allow root to directly telnet in.  I know
> that I can telnet in as
> a standard users then 'su' to switch to root.  Is
> there any reason why I
> should configure my system so that I can telnet in
> directly as root?
> Thanks.
> 
> Regards,
> J.S.
> ___
> [EMAIL PROTECTED] mailing list
>
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
> To unsubscribe, send any mail to
> "[EMAIL PROTECTED]"
> 
I believe that this would be a security precaution. 
If someone tries to compromise your system, then it
means that they have to get two passwords to get root.
 

To quote man security:
"Security is best implemented through a layered onion
approach."

Pete




__
Do you Yahoo!?
Yahoo! Mail - Helps protect you from nasty viruses.
http://promotions.yahoo.com/new_mail
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"